'use strict'; const groups = require('../groups'); const user = require('../user'); const utils = require('../utils'); const events = require('../events'); const privileges = require('../privileges'); const SocketGroups = module.exports; SocketGroups.before = async (socket, method, data) => { if (!data) { throw new Error('[[error:invalid-data]]'); } }; SocketGroups.addMember = async (socket, data) => { await isOwner(socket, data); if (data.groupName === 'administrators' || groups.isPrivilegeGroup(data.groupName)) { throw new Error('[[error:not-allowed]]'); } if (!data.uid) { throw new Error('[[error:invalid-data]]'); } data.uid = !Array.isArray(data.uid) ? [data.uid] : data.uid; if (data.uid.filter(uid => !(parseInt(uid, 10) > 0)).length) { throw new Error('[[error:invalid-uid]]'); } for (const uid of data.uid) { // eslint-disable-next-line no-await-in-loop await groups.join(data.groupName, uid); } logGroupEvent(socket, 'group-add-member', { groupName: data.groupName, targetUid: String(data.uid), }); }; async function isOwner(socket, data) { if (typeof data.groupName !== 'string') { throw new Error('[[error:invalid-group-name]]'); } const results = await utils.promiseParallel({ hasAdminPrivilege: privileges.admin.can('admin:groups', socket.uid), isGlobalModerator: user.isGlobalModerator(socket.uid), isOwner: groups.ownership.isOwner(socket.uid, data.groupName), group: groups.getGroupData(data.groupName), }); const isOwner = results.isOwner || results.hasAdminPrivilege || (results.isGlobalModerator && !results.group.system); if (!isOwner) { throw new Error('[[error:no-privileges]]'); } } SocketGroups.search = async (socket, data) => { data.options = data.options || {}; if (!data.query) { const groupsPerPage = 15; const groupData = await groups.getGroupsBySort(data.options.sort, 0, groupsPerPage - 1); return groupData; } data.options.filterHidden = data.options.filterHidden || !await user.isAdministrator(socket.uid); return await groups.search(data.query, data.options); }; SocketGroups.loadMore = async (socket, data) => { if (!data.sort || !utils.isNumber(data.after) || parseInt(data.after, 10) < 0) { throw new Error('[[error:invalid-data]]'); } const groupsPerPage = 10; const start = parseInt(data.after, 10); const stop = start + groupsPerPage - 1; const groupData = await groups.getGroupsBySort(data.sort, start, stop); return { groups: groupData, nextStart: stop + 1 }; }; SocketGroups.searchMembers = async (socket, data) => { if (!data.groupName) { throw new Error('[[error:invalid-data]]'); } await canSearchMembers(socket.uid, data.groupName); if (!await privileges.global.can('search:users', socket.uid)) { throw new Error('[[error:no-privileges]]'); } return await groups.searchMembers({ uid: socket.uid, query: data.query, groupName: data.groupName, }); }; SocketGroups.loadMoreMembers = async (socket, data) => { if (!data.groupName || !utils.isNumber(data.after) || parseInt(data.after, 10) < 0) { throw new Error('[[error:invalid-data]]'); } await canSearchMembers(socket.uid, data.groupName); data.after = parseInt(data.after, 10); const users = await groups.getOwnersAndMembers(data.groupName, socket.uid, data.after, data.after + 9); return { users: users, nextStart: data.after + 10, }; }; async function canSearchMembers(uid, groupName) { const [isHidden, isMember, hasAdminPrivilege, isGlobalMod, viewGroups] = await Promise.all([ groups.isHidden(groupName), groups.isMember(uid, groupName), privileges.admin.can('admin:groups', uid), user.isGlobalModerator(uid), privileges.global.can('view:groups', uid), ]); if (!viewGroups || (isHidden && !isMember && !hasAdminPrivilege && !isGlobalMod)) { throw new Error('[[error:no-privileges]]'); } } SocketGroups.cover = {}; SocketGroups.cover.update = async (socket, data) => { if (!socket.uid) { throw new Error('[[error:no-privileges]]'); } if (data.file || (!data.imageData && !data.position)) { throw new Error('[[error:invalid-data]]'); } await canModifyGroup(socket.uid, data.groupName); return await groups.updateCover(socket.uid, { groupName: data.groupName, imageData: data.imageData, position: data.position, }); }; SocketGroups.cover.remove = async (socket, data) => { if (!socket.uid) { throw new Error('[[error:no-privileges]]'); } await canModifyGroup(socket.uid, data.groupName); await groups.removeCover({ groupName: data.groupName, }); }; async function canModifyGroup(uid, groupName) { if (typeof groupName !== 'string') { throw new Error('[[error:invalid-group-name]]'); } const results = await utils.promiseParallel({ isOwner: groups.ownership.isOwner(uid, groupName), system: groups.getGroupField(groupName, 'system'), hasAdminPrivilege: privileges.admin.can('admin:groups', uid), isGlobalMod: user.isGlobalModerator(uid), }); if (!(results.isOwner || results.hasAdminPrivilege || (results.isGlobalMod && !results.system))) { throw new Error('[[error:no-privileges]]'); } } function logGroupEvent(socket, event, additional) { events.log({ type: event, uid: socket.uid, ip: socket.ip, ...additional, }); } require('../promisify')(SocketGroups);